Re:What NPM should do to stop a new colors attack
by selfhoster11 on Monday January 10, 2022 @04:18PM
(#29882690)
Perhaps by the time he started feeling this way, it was too late to relicense? Megacorps would just fork from a pre-GPL release and carry on.
Re:What NPM should do to stop a new colors attack
by peoplefromibiza on Monday January 10, 2022 @04:29PM
(#29882859)
that's my understansing as well.
I'm not judging the author here, but on one hand I understand the frustration, on the other hand the package probably owes its popularity in part to its very permissive license.
Anyway, a fork maintained by the companies that use the package would still be a better outcome than keep working for them for free (or remove the package entirely).
Re:What NPM should do to stop a new colors attack
by accoil on Monday January 10, 2022 @04:15PM
(#29882632)
Would GPL help though? It's a library used by tests, not part of the end product distributed to users.
Re:What NPM should do to stop a new colors attack
by peoplefromibiza on Monday January 10, 2022 @04:24PM
(#29882786)
I don't know in this case but in general a GPL fork must stay GPL and, AFAIUI, importing a GPL package in your code it's similar to linking to it, so if the code that uses your GPL package is published (on GH for example) that could be considered redistribution. Not sure about the legalities but it could create enough friction to keep companies not willing to contribute away.
Re:What NPM should do to stop a new colors attack
by accoil on Monday January 10, 2022 @05:10PM
(#29883477)
I guess I'm thinking more in terms of faker, which I believe was a library for creating test data. Makes me wonder if licenses matter much for tools that are never intended to be included in the final distribution.
Internal changes aren't going to be detectable, so it feels like the best you can hope for is that they don't want the maintenance burden of a patch set on top of your project. At that point it's not much different than MIT.
That said, AGPL would scare off most companies :p
I understand the sentiment, but why chose MIT license then?
GPL would be the right choice if one wants to stop companies profiting from free work without giving anything back.